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IN THE CLAIMS: 
Amended claims follow: 

1 . (Currently Amended) A method of authorising an additional computer program 
module for use with a core computer program, said core computer program being 
installed, said method comprising the steps of: 

reading module signature data associated with said additional computer program 
module; 

reading core signature data and other signature data associated with said core 
computer program; 

wherein said other signature data is user signature data; 

comparing said module signature data with said core signature data and said user 
signature data; and 

refusing authorisation of said additional computer program module for use with 
said core computer program unless said module signature data matches at least one of 
said core signature data and said user signature data; 

wherein fe esaid user signature data allows a particular user to authorize the said 
additional computer program module for use with thesaid installed core computer 
program; 

wherein said user signature data is utilized to authorize said additional computer 
program module which is from a third party for use with said core computer program . 

2. (Cancelled) 

3. (Previously Amended) A method as claimed in claim 1 , wherein said additional 
computer program module is refused authorisation for use with said core computer 
program unless said module signature data matches both of said core signature data and 
said user signature data. 
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4. (Previously Amended) A method as claimed in claim 1 , wherein said module 
signature data, said core signature data and said user signature data include public key 
infrastructure signatures. 

5. (Previously Amended) A method as claimed in claim 1, wherein said user 
signature data is associated with said core computer program upon installation of said 
core computer program. 

6. (Previously Amended) A method as claimed in claim 5 wherein said user 
signature data is embedded within said core computer program. 

7. (Previously Amended) A method as claimed in claim 1, wherein said user 
signature data is embedded within said core computer program by applying a user 
specific patch to said core computer program. 

8. (Original) A method as claimed in claim 1, wherein said core signature data is 
associated with said core computer program upon generation of said core computer 
program. 

9. (Original) A method as claimed in claim 8, wherein said core signature data is 
embedded within said core computer program. 

10. (Original) A method as claimed in claim 1 , wherein said core computer program 
is an anti-virus computer program. 

1 1 . (Original) A method as claimed in claim 10, wherein said anti-virus computer 
program operates with at least one updateable anti-virus computer program module. 

12. (Cancelled) 
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13. (Original) A method as claimed in claim I, wherein said additional computer 
program module provides functionality independent of that of said core computer 
program. 

14. (Previously Amended) A method as claimed in claim 10, wherein said additional 
computer program module does not relate to anti-virus protection. 

15. (Original) A method as claimed in claim 1, wherein said additional computer 
program module is operable to patch an installed computer program. 

16. (Original) A method as claimed in claim 1, wherein said additional computer 
program module is operable to install another computer program. 

1 7. (Original) A method of generating an additional computer program module for 
use with a core computer program when authorised in accordance with the method of 
claim 1 ? said method comprising the steps of: 

writing said additional computer program module; 

receiving new user information from a new user of said additional computer 
program module; 

generating user signature data specific to said new user in dependence upon said 
new user information; 

associating said user signature data with said additional computer program 
module; and 

providing said additional computer program module with associated user 
signature data to said new user. 

18. (Original) A method as claimed in claim 17, wherein said step of generating uses 
a tool produced by a provider of said core computer program. 

1 9. (Original) A method as claimed in claim 1 8, wherein said step of associating uses 
a tool produced by a provider of said core computer program. 
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20. (Original) A method of generating an additional computer program module for 
use with a core computer program when authorised in accordance with the method of 
claim 1, said method comprising the steps of: 

writing said additional computer program module; 

generating signature data specific to said additional computer program module in 
dependence upon said additional computer program module using a tool produced by a 
provider of said core computer program; 

associating said signature data with said additional computer program module; 

and 

providing said additional computer program module with associated signature 
data to said new user. 

21 . (Original) A method of generating an additional computer program module for 
use with a core computer program when authorised in accordance with the method of 
claim 1, said method comprising the steps of: 

writing said additional computer program module; 
providing said additional computer program module to a new user; 
said new user associating user signature data with said additional computer 
program module; 

providing said additional computer program module and associated user signature 
data to a provider of said core computer program; 

said provider of said core computer program associating core signature data with 
said additional computer program module and associated user signature data; 

providing said additional computer program module and associated user signature 
data and core signature data to said new user. 

22-64. (Cancelled) 
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65 . (Currently Amended) Tho m e thod or , claimed in claim L A method of authorising 
an additional computer program module for use with a core computer program, said core 
computer program being installed, said method comprising the steps of: 

reading module signature data associated with said additional computer program 
module; 

reading core signature data and other signature data associated with said core 
computer program; 

wherein said other signature data is user signature data; 

comparing said module signature data with said core signature data and said user 
signature data; and 

refusing authorisation of said additional computer program module for use with 
said core computer program unless said module signature data matches at least one of 
said core signature data and said user signature data; 

wherein said user signature data allows a particular user to authorize said 
additional computer program module for use with said installed core computer program: 

wherein said user signature data is utilized to authorize said additional computer 
program module which is generated by said user for use with said core computer 
program. 

66. (Currently Amended) Tho method qg claim e d in claim L A method of authorising 
an additional computer program module for use with a core computer program, said core 
computer program being installed, said method comprising the steps of: 

reading module signature data associated with said additional computer program 
module: 

reading core signature data and other signature data associated with said core 
computer program; 

wherein said other signature data is user signature data; 

comparing said module signature data with said core signature data and said user 
signature data; and 
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refiisine authorisation of said additional computer program modul e for use with 
said core computer program unless said module signature data matches at least one of 
said core signature data and said user signature data; 

wherein said user signature data allows a particular user to authorize said 
additional computer program module for use with said installed core computer program; 

wherein said core computer program keeps a list of module providers which have 
been previously authorized by said user signature data, such that said user signature data 
becomes associated with additional computer program modules provided by module 
providers indicated on said list. 
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